CVE-2017-20213

HIGH

FLIR Thermal Camera F/FC/PT/D Stream <8.0.0.64 - Info Disclosure

Title source: llm

Description

FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera series without requiring any authentication.

Exploits (1)

exploitdb WRITEUP

by LiquidWorm · textwebappshardware

https://www.exploit-db.com/exploits/42789

View Code ZIP pw:eip

References (5)

[Various Sources] https://web.archive.org/web/20171011125811/https://www.flir.com/security/blog/details/?ID=87043

[Exploit, Third Party Advisory] https://packetstormsecurity.com/files/144323

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/42789/

[Issue Tracking] https://cxsecurity.com/issue/WLB-2017090204

[Third Party Advisory] https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5435.php

Scores

CVSS v3 7.5

EPSS 0.0017

EPSS Percentile 38.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-306

Status draft

Timeline

Published Jan 08, 2026

Tracked Since Feb 18, 2026